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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1. A request for continued examination under 37 CFR 1.114 was filed in this 
application after a decision by the Board of Patent Appeals and Interferences, but 
before the filing of a Notice of Appeal to the Court of Appeals for the Federal Circuit or 
the commencement of a civil action. Since this application is eligible for continued 
examination under 37 CFR 1 .1 14 and the fee set forth in 37 CFR 1 .17(e) has been 
timely paid, the appeal has been withdrawn pursuant to 37 CFR 1.114 and prosecution 
in this application has been reopened pursuant to 37 CFR 1.114. Applicant's 
submission filed on 4/24/09 has been entered. 

Terminal Disclaimer 

2. The terminal disclaimer filed on 4/24/09 disclaiming the terminal portion of any 
patent granted on this application which would extend beyond the expiration date of the 
full statutory term of prior patent No. 6,430,712 has been reviewed and is accepted. 
The terminal disclaimer has been recorded. 

EXAMINER'S AMENDMENT 

3. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with JafarAlion 7/2/2009. 
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The application has been amended as follows: 

1 . (Currently Amended) A computer-implemented system for providing service 
level management comprising: 

a network having a plurality of network hardware components that support a 
service provided over the network, wherein performance of the service depends upon 
performances of the plurality of network hardware components that support the service, 
and wherein the service has a state that represents the performance of the service; 

a plurality of monitoring agents configured to monitor respective individual 
domains of the network that include respective subsets of the plurality of network 
hardware components that support the service, wherein the plurality of monitoring 
agents include: 

a first monitoring agent configured to monitor one or more component 
parameters for a first subset of the plurality of network hardware components in a first 
domain of the network, detect one or more intra-domain events in the first domain as a 
function of the component parameters monitored in the first domain, and generate one 
or more intra-domain alarms in the first domain as a function of the intra-domain events 
detected in the first domain; and 

a second monitoring agent configured to monitor one or more component 
parameters for a second subset of the plurality of network hardware components in a 
second domain of the network, detect one or more intra-domain events in the second 
domain as a function of the component parameters monitored in the second domain, 
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and generate one or more intra-domain alarms in the second domain as a function of 
the intra-domain events detected in the second domain; and 
an alarm correlation agent configured to: 

correlate the intra-domain alarms generated in the first domain and the second 
domain to generate one or more inter-domain alarms across the first domain and the 
second domain; 

map the inter-domain alarms generated across the first domain and the second 
domain to a service parameter that represents a current state of the service, wherein 
the current state of the service is undesirable when the service parameter has a value 
that does not meet or exceed a service level identified in a service level agreement; and 

issue one or more instructions to autonomously establish a desirable state of the 
service in response to the current state of the service being undesirable, wherein the 
desirable state of the service is established when the instructions cause the value of the 
service parameter to meet or exceed the service level identified in the service level 
agreement. 
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4. (Currently Amended) The system of claim 3, wherein the reasoning agents 
comprise: 

at least one rule-based reasoning agent having a working memory that includes 
a plurality of facts relating to the service, a rule base that represents knowledge relating 
to additional facts to infer and actions to take based on the facts in the working memory, 
and an inference engine configured to make one or more inferences based on the facts 
in the working memory and the knowledge represented in the rule base; 

at least one model-based reasoning agent having a plurality of models that 
represent the plurality of network hardware components that support the service and a 
correlation architecture that provides collaboration among the plurality of models; 

at least one state-transition graph based reasoning agent having fuzzy logic that 
defines grades of membership for a plurality of states, wherein the grades of 
membership quantify transitions among the plurality of states; 

at least one code book based reasoning agent; and 

at least one case-based reasoning agent having a case library that includes a 
plurality of cases representing episodes of problem solving, a plurality of relevance rules 
for identifying one or more of the cases in the case library that are relevant to a current 
problem relating to the service, and parameterized adaption logic that adapts solutions 
variables associated with the identified cases for the current problem relating to the 
service. 
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6. (Currently Amended) A computer-implemented system for providing service 
level management comprising: 

a network having a plurality of network hardware components that support a 
service provided over the network, wherein performance of the service depends upon 
performances of the plurality of network hardware components that support the service, 
and wherein the service has a state that represents the performance of the service; 

a first monitoring agent configured to: 

monitor one or more component parameters for a first subset of the plurality of 
network hardware components in a first domain of the network; 

detect one or more intra-domain events in the first domain as a function of the 
component parameters monitored in the first domain; and 

generate one or more intra-domain alarms in the first domain as a function of the 
intra-domain events detected in the first domain; 

a second monitoring agent configured to: 

monitor one or more component parameters for a second subset of the plurality 
of network hardware components in a second domain of the network; 

detect one or more intra-domain events in the second domain as a function of the 
component parameters monitored in the second domain; and 

generate one or more intra-domain alarms in the second domain as a function of 
the intra-domain events detected in the second domain; 
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an alarm bucket configured to receive the intra-domain alarms generated in the 
first domain and the second domain from the first monitoring agent and the second 
monitoring agent; and 

an alarm correlation agent configured to: 

correlate the toe-intra-domain alarms in the alarm bucket to generate one or 
more inter-domain alarms across the first domain and the second domain; 

map the inter-domain alarms generated across the first domain and the second 
domain to a service parameter that represents a current state of the service, wherein 
the current state of the service is undesirable when the service parameter has a value 
that does not meet or exceed a service level identified in a service level agreement; and 

issue one or more instructions to autonomously establish a desirable state of the 
service in response to the current state of the service being undesirable, wherein the 
desirable state of the service is established when the instructions cause the value of the 
service parameter to meet or exceed the service level identified in the service level 
agreement. 
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10. (Currently Amended) The system of claim 6, wherein the first monitoring 
agent and the second monitoring agent comprise reasoning agents that provide reactive 
or reflexive behavior designed for short-term problem solving relating to the service, and 
wherein the alarm correlation agent comprises a reasoning agent that provides 
deliberative behavior designed for long-term problem solving relating to the service, 
wherein the reasoning agents comprise: 

at least one rule-based reasoning agent having a working memory that includes 
a plurality of facts relating to the service, a rule base that represents knowledge relating 
to additional facts to infer and actions to take based on the facts in the working memory, 
and an inference engine configured to make one or more inferences based on the facts 
in the working memory and the knowledge represented in the rule base; 

at least one model-based reasoning agent having a plurality of models that 
represent the plurality of network hardware components that support the service and a 
correlation architecture that provides collaboration among the plurality of models; 

at least one state-transition graph based reasoning agent having fuzzy logic that 
defines grades of membership for a plurality of states, wherein the grades of 
membership quantify transitions among the plurality of states; 

at least one code book based reasoning agent; and 

at least one case-based reasoning agent having a case library that includes a 
plurality of cases representing episodes of problem solving, a plurality of relevance rules 
for identifying one or more of the cases in the case library that are relevant to a current 
problem relating to the service, and parameterized adaption logic that adapts solutions 
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variables associated with the identified cases for the current problem relating to the 
service. 
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1 1 . (Currently Amended) A computer-implemented system for providing service 
level management comprising: 

a network having a plurality of network hardware components that support a 
service provided over the network, wherein performance of the service depends upon 
performances of the plurality of network hardware components that support the service, 
and wherein the service has a state that represents the performance of the service; 

a plurality of monitoring agents, wherein each of the plurality of monitoring agents 
are configured to: 

monitor one or more component parameters for a subset of the plurality of 
network hardware components in a respective domain of a plurality of domains of the 
network; 

detect one or more intra-domain events in the respective domain as a function of 
the component parameters monitored in the respective domain; and 

generate one or more intra-domain alarms in the respective domain as a function 
of the intra-domain events detected in the respective domain; and 

an alarm correlation agent, wherein the alarm correlation agent is configured to: 

correlate the intra-domain alarms generated in the respective domains by the 
plurality of monitoring agents to generate one or more inter-domain alarms across the 
plurality of domains of the network; 

map the inter-domain alarms generated across the plurality of domains of the 
network to a service parameter that represents a current state of the service, wherein 
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the current state of the service is undesirable when the service parameter has a value 
that does not meet or exceed a service level identified in a service level agreement; and 
issue one or more instructions to autonomously establish a desirable state of the 
service in response to the current state of the service being undesirable, wherein the 
desirable state of the service is established when the instructions cause the value of the 
service parameter to meet or exceed the service level identified in the service level 
agreement. 
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12. (Currently Amended) The system of claim 1 1 , wherein the alarm correlation 
agent comprises a reasoning agent that provides deliberative behavior designed for 
long-term problem solving relating to the service, wherein the reasoning agent 
comprises: 

at least one rule-based reasoning agent having a working memory that includes 
a plurality of facts relating to the service, a rule base that represents knowledge relating 
to additional facts to infer and actions to take based on the facts in the working memory, 
and an inference engine configured to make one or more inferences based on the facts 
in the working memory and the knowledge represented in the rule base; 

at least one model-based reasoning agent having a plurality of models that 
represent the plurality of network hardware components that support the service and a 
correlation architecture that provides collaboration among the plurality of models; 

at least one state-transition graph based reasoning agent having fuzzy logic that 
defines grades of membership for a plurality of states, wherein the grades of 
membership quantify transitions among the plurality fo states; 

at least one code book based reasoning agent; and 

at least one case-based reasoning agent having a case library that includes a 
plurality of cases representing episodes of problem solving, a plurality of relevance rules 
for identifying one or more of the cases in the case library that are relevant to a current 
problem relating to the service, and parameterized adaption logic that adapts solutions 
variables associated with the identified cases for the current problem relating to the 
service. 
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21 . (Currently Amended) A computer hardware device r e adab le m e d i um having 
computer executable instructions recorded thereon, wherein the computer executable 
instructions are operable to direct a computer hardware device to perform a method for 
providing service level management, the method comprising: 

providing a service over a network having a plurality of network components that 
support the service, wherein performance of the service depends upon performances of 
the plurality of network components that support the service, and wherein the service 
has a state that represents the performance of the service; 

monitoring one or more component parameters for the plurality of network 
components that support the service using a plurality of monitoring agents, wherein 
each of the plurality of monitoring agents are configured to monitor a subset of the 
plurality of network components in a respective domain of a plurality of domains of the 
network; 

detecting one or more intra-domain events in each of the respective domains as 
a function of the component parameters monitored by the plurality of monitoring agents 
in the respective domains; 

generating one or more intra-domain alarms in each of the respective domains 
as a function of the intra-domain events detected in the respective domains; 

correlating the intra-domain alarms generated in the respective domains using an 
alarm correlation agent, wherein the alarm correlation agent is configured to correlate 
the intra-domain alarms to generate one or more inter-domain alarms across the 
plurality of domains of the network; 



Application/Control Number: 09/578,156 Page 14 

Art Unit: 2445 

mapping the inter-domain alarms generated across the plurality of domains of the 
network to a service parameter that represents a current state of the service, wherein 
the current state of the service is undesirable when the service parameter has a value 
that does not meet or exceed a service level identified in a service level agreement; and 

issuing one or more instructions to autonomously establish a desirable state of 
the service in response to the current state of the service being undesirable, wherein 
the desirable state of the service is established when the instructions cause the value of 
the service parameter to meet or exceed the service level identified in the service level 
agreement. 
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23. (Currently Amended) A computer-implemented system for providing service 
level management comprising: 

a network having a plurality of network hardware components that support a 
service provided over the network, wherein performance of the service depends upon 
performances of the plurality of network hardware components that support the service, 
and wherein the service has a state that represents the performance of the service; 

a plurality of monitoring agents configured to monitor respective individual 
domains of the network that include respective subsets of the plurality of network 
hardware components that support the service, wherein the plurality of monitoring 
agents is configured to detect one or more intra-domain events in the respective domain 
as a function of the component parameters monitored in the respective domain and 
generate one or more intra-domain alarms in the respective domain as a function of the 
intra-domain events detected in the respective domain, wherein each of the plurality of 
monitoring agents include: 

an alarm correlation agent configured to correlate the intra-domain alarms 
generated in the respective domain in addition to one or more intra-domain alarms 
generated in the other individual domains by the other monitoring agents to generate 
one or more inter-domain alarms across the individual domains of the network, map the 
inter-domain alarms generated across the individual domains and to a service 
parameter that represents a current state of the service, wherein the current state of the 
service is undesirable when the service parameter has a value that does not meet or 
exceed a service level identified in a service level agreement; and 
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a control agent configured to control the component parameters for the subset of 
the plurality of network hardware components in the respective monitored domain and 
issue one or more instructions for one or more of the controlled component parameters 
to autonomously establish a desirable state of the service in response to the current 
state of the service being undesirable, wherein the desirable state of the service is 
established when the instructions cause the value of the service parameter to meet or 
exceed the service level identified in the service level agreement. 



Application/Control Number: 09/578,156 Page 17 

Art Unit: 2445 

25. (Currently Amended) The system of claim 23, wherein the plurality of 
monitoring agents comprise reasoning agents that provide reactive or reflexive behavior 
designed for short-term problem solving relating to the service, and wherein the alarm 
correlation agent within each of the plurality of monitoring agents comprises a reasoning 
agent that provides deliberative behavior designed for long-term problem solving 
relating to the services, and wherein the reasoning agents comprise: 

at least one rule-based reasoning agent having a working memory that includes 
a plurality of facts relating to the service, a rule base that represents knowledge relating 
to additional facts to infer and actions to take based on the facts in the working memory, 
and an inference engine configured to make one or more inferences based on the facts 
in the working memory and the knowledge represented in the rule base; 

at least one model-based reasoning agent having a plurality of models that 
represent the plurality of network hardware components that support the service and a 
correlation architecture that provides collaboration among the plurality of models; 

at least one state-transition graph based reasoning agent having fuzzy logic that 
defines grades of membership for a plurality of states, wherein the grades of 
membership quantify transitions among the plurality of states; 

at least one code book based reasoning agent; and 

at least one case-based reasoning agent having a case library that includes a 
plurality of cases representing episodes of problem solving, a plurality of relevance rules 
for identifying one or more of the cases in the case library that are relevant to a current 
problem relating to the service, and parameterized adaption logic that adapts solutions 
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26. (Currently Amended) A computer hardware device r e adab le m e d i um having 
computer executable instructions recorded thereon, wherein the computer executable 
instructions are operable to direct a computer hardware device to perform a method for 
providing service level management, the method comprising: 

providing a service over a network having a plurality of network components that 
support the service, wherein performance of the service depends upon performances of 
the plurality of network components that support the service, and wherein the service 
has a state that represents the performance of the service; 

monitoring one of a plurality of domains of the network using the agent operating 
on the computer, wherein the monitored domain includes a subset of the plurality of 
network components that support the service; 

detecting one or more intra-domain events in the monitored domain as a function 
of the component parameters monitored in the domain; 

generating one or more intra-domain alarms in the monitored domain as a 
function of the intra-domain events detected in the monitored domain; 

correlating the intra-domain alarms generated in the monitored domain, the intra- 
domain events detected across the plurality of domains, and the intra-domain alarms 
generated across the plurality of domains to generate one or more inter-domain alarms 
across the plurality of domains of the network; 

mapping the inter-domain alarms generated across the plurality of domains of the 
network to a service parameter that represents a current state of the service, wherein 
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the current state of the service is undesirable when the service parameter has a value 
that does not meet or exceed a service level identified in a service level agreement; and 

issuing one or more instructions to autonomously establish a desirable state of 
the service in response to the current state of the service being undesirable, wherein 
the desirable state of the service is established when the instructions cause the value of 
the service parameter to meet or exceed the service level identified in the service level 
agreement. 
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4. The following is an examiner's statement of reasons for allowance: The prior art 
fails to teach or suggest a system where monitoring agents monitor individual domains, 
detect intra-domain events, generate intra-domain alarms, correlate the intra-domain 
alarms into an inter-domain alarm, and use the inter-domain alarm to issue instructions 
to establish a desired state of the service when the current state of the service is 
undesirable and does not meet a service level agreement. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Drawings 

5. New corrected drawings in compliance with 37 CFR 1 .121 (d) are required in this 
application because the drawings are hand lettered and are difficult to read in places 
due to the submitted screen shots (see Figures 19, 20, 35 and 36 for non-limiting 
examples of drawings which are illegible). Applicant is advised to employ the services of 
a competent patent draftsperson outside the Office, as the U.S. Patent and Trademark 
Office no longer prepares new drawings. The corrected drawings are required in reply to 
the Office action to avoid abandonment of the application. The requirement for 
corrected drawings will not be held in abeyance. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jeffrey R. Swearingen whose telephone number is 
(571)272-3921 . The examiner can normally be reached on M-F 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Vivek Srivastava can be reached on 571-272-7304. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Jeffrey R. Swearingen 

Examiner 

Art Unit 2445 

/J. R. S./ 

Examiner, Art Unit 2445 

A/IVEK SRIVASTAVA/ 

Supervisory Patent Examiner, Art Unit 2445 



